189a39eb9a0f97b355c30b68ab7ac23c5030d083ce75e23ab918aab7149b8a01 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

189a39eb9a0f97b355c30b68ab7ac23c5030d083ce75e23ab918aab7149b8a01
Size

73KB
Sample

241014-xryqja1ejh
MD5

67685def6d08dbcb1e1600c5b328b1dd
SHA1

de1e4f0310e0c22feaa9fee531bb3a6ece005319
SHA256

189a39eb9a0f97b355c30b68ab7ac23c5030d083ce75e23ab918aab7149b8a01
SHA512

85d27e7228cf491ad75efbfdb83b903dcf6d886b7c298505528c10a0d5699812c23f305cb1085985c686887cc04a468d3ff5f119e92d196a747632ead2ef49f1
SSDEEP

768:/7BlpQpARFbhvEXBwzEXBwLtAc7Fc7u595QUhUey5vhgCy5vhgn:/7ZQpApHou595QUhUBgtgn

Score

9^/10

discovery ransomware

Malware Config

Targets

- Target
  
  189a39eb9a0f97b355c30b68ab7ac23c5030d083ce75e23ab918aab7149b8a01
- Size
  
  73KB
- MD5
  
  67685def6d08dbcb1e1600c5b328b1dd
- SHA1
  
  de1e4f0310e0c22feaa9fee531bb3a6ece005319
- SHA256
  
  189a39eb9a0f97b355c30b68ab7ac23c5030d083ce75e23ab918aab7149b8a01
- SHA512
  
  85d27e7228cf491ad75efbfdb83b903dcf6d886b7c298505528c10a0d5699812c23f305cb1085985c686887cc04a468d3ff5f119e92d196a747632ead2ef49f1
- SSDEEP
  
  768:/7BlpQpARFbhvEXBwzEXBwLtAc7Fc7u595QUhUey5vhgCy5vhgn:/7ZQpApHou595QUhUBgtgn
Score

9^/10

discovery ransomware
- Renames multiple (3743) files with added filename extension
  This suggests ransomware activity of encrypting all the files on the system.
  ransomware
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryransomware

behavioral2

discoveryransomware